$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft File: wxT-rYcguxji2eIkk4K433VEbYs.mft (raw, json) Hash identifier: 3pOPXBn5u8jEe4x9ZJsnTUkKTZqtFRNFv3H4fvTldAk= Subject key identifier: CA:A4:9F:00:E6:E4:3D:95:16:8E:BA:77:47:8D:7F:B9:0B:C4:44:AD Authority key identifier: C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B Certificate issuer: /CN=A91CFCD3/serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B Certificate serial: 048C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft Manifest number: 0489 Signing time: Sun 19 May 2024 01:37:26 +0000 Manifest this update: Sun 19 May 2024 01:37:25 +0000 Manifest next update: Sun 26 May 2024 01:37:25 +0000 Files and hashes: 1: wxT-rYcguxji2eIkk4K433VEbYs.crl (hash: JE4DazSbwjql7MBFkfGn2PdyFtrI4K+2umP+Ob9hrA8=) 2: EDA4BE18EF8711EBAF811557C4F9AE02.roa (hash: /hsEroQ3TZkQMetTWnTa556RJHci46V26XicsZhhKo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1164 (0x48c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFCD3/serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B Validity Not Before: May 19 01:37:25 2024 GMT Not After : May 26 01:37:25 2024 GMT Subject: CN=664957d6-4fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:25:f5:a6:0a:4a:87:a0:cf:01:43:c3:61:2e: 30:41:37:eb:34:56:8f:4f:69:1b:a4:84:9c:8d:53: bd:4b:bd:c8:47:a8:1d:a8:0b:16:0d:7f:fa:3f:21: 78:0b:16:a5:f8:3f:4c:5c:9b:f8:40:00:01:81:cf: 04:11:00:a6:ad:75:39:b8:38:9d:ec:31:b3:d5:87: 40:38:be:b9:df:ea:c3:1f:73:47:15:c5:3c:cc:f2: 11:db:c4:8f:f7:4f:94:a2:d5:66:37:33:e8:f7:cf: 8c:a6:2e:33:2c:4e:4d:c8:0c:b6:71:70:55:31:e4: d3:f6:01:8a:95:f8:05:8d:b5:46:c6:f1:2a:bd:02: e7:9f:95:4e:c5:af:28:49:19:d1:90:36:e5:19:1a: 7b:b7:68:07:35:73:d8:1d:1e:ee:d1:a5:84:fc:d7: 1e:d1:d0:e3:0b:65:d9:76:e5:c9:46:85:ba:2a:bd: 78:47:4e:03:7f:78:45:68:d8:e5:de:d5:05:f9:0a: a6:d3:b7:8d:2e:42:72:1a:cb:bc:62:bf:77:1a:d3: 8a:be:c0:e6:fb:dd:bd:2f:2b:73:cb:42:e1:b9:fb: 57:c6:6b:53:40:7e:cc:cf:9f:64:e0:77:d9:02:a4: 4d:10:86:c5:5e:9d:72:ff:2f:64:f9:33:b5:41:87: 3a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A4:9F:00:E6:E4:3D:95:16:8E:BA:77:47:8D:7F:B9:0B:C4:44:AD X509v3 Authority Key Identifier: keyid:C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:52:ac:a6:c4:a7:e5:01:da:0d:36:96:b4:09:88:8b:a9:36: e5:27:78:ca:56:e7:a8:10:d1:8e:38:a6:9a:f1:75:92:c0:c4: eb:46:9c:b0:6c:25:6d:39:f8:ba:37:c0:e5:fe:64:17:f6:f8: e2:04:36:b8:b8:bc:f0:a5:1f:02:53:23:a7:d6:bf:33:12:c6: b5:ae:e8:46:8e:9d:10:f6:2a:3b:ee:8e:c0:d4:0b:81:cf:bf: 22:ea:98:56:5b:a1:2f:49:19:99:b0:8f:cc:82:96:c7:2d:c5: 09:58:f3:e8:ae:eb:cd:e2:e7:0d:bf:2d:71:7c:7b:0e:55:d2: 6d:8b:8c:52:10:83:07:e2:2c:41:a4:86:aa:78:3d:94:b8:c2: 22:7f:41:6f:e7:6f:65:a0:71:ab:29:e3:69:6e:94:47:0f:a6: 45:89:99:00:be:75:30:26:46:ce:76:15:2a:81:64:74:b1:18: 4f:08:c6:8c:e4:f1:00:ed:37:43:a5:0f:24:e4:ef:c2:ca:8d: 7c:9b:27:27:07:19:c1:e1:f6:8e:d3:18:ea:ab:c5:1c:4f:79: b2:18:dd:5c:b5:f2:02:82:25:81:59:c3:f3:6f:b3:a3:57:7e: 01:ee:5b:02:a7:b0:4d:30:95:69:f9:8f:2d:e9:02:95:85:2d: 73:f1:ae:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDRDMxMTAvBgNVBAUTKEMzMTRGRUFEODcyMEJCMThFMkQ5RTIyNDkzODJCOERG NzU0NDZEOEIwHhcNMjQwNTE5MDEzNzI1WhcNMjQwNTI2MDEzNzI1WjAYMRYwFAYD VQQDEw02NjQ5NTdkNi00ZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCX1pgpKh6DPAUPDYS4wQTfrNFaPT2kbpIScjVO9S73IR6gdqAsWDX/6PyF4 Cxal+D9MXJv4QAABgc8EEQCmrXU5uDid7DGz1YdAOL653+rDH3NHFcU8zPIR28SP 90+UotVmNzPo98+Mpi4zLE5NyAy2cXBVMeTT9gGKlfgFjbVGxvEqvQLnn5VOxa8o SRnRkDblGRp7t2gHNXPYHR7u0aWE/Nce0dDjC2XZduXJRoW6Kr14R04Df3hFaNjl 3tUF+Qqm07eNLkJyGsu8Yr93GtOKvsDm+929Lytzy0LhuftXxmtTQH7Mz59k4HfZ AqRNEIbFXp1y/y9k+TO1QYc67wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqknwDm 5D2VFo66d0eNf7kLxEStMB8GA1UdIwQYMBaAFMMU/q2HILsY4tniJJOCuN91RG2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNEMy9DNDcyN0ExMEVG ODQxMUVCOTI5QjA2NTBDNEY5QUUwMi93eFQtclljZ3V4amkyZUlrazRLNDMzVkVi WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4VC1yWWNndXhqaTJlSWtrNEs0MzNWRWJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkNEMy9DNDcyN0ExMEVGODQxMUVCOTI5QjA2NTBDNEY5QUUwMi93eFQtclljZ3V4 amkyZUlrazRLNDMzVkViWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhUqymxKflAdoNNpa0CYiLqTblJ3jKVueoENGOOKaa8XWSwMTrRpyw bCVtOfi6N8Dl/mQX9vjiBDa4uLzwpR8CUyOn1r8zEsa1ruhGjp0Q9io77o7A1AuB z78i6phWW6EvSRmZsI/MgpbHLcUJWPPoruvN4ucNvy1xfHsOVdJti4xSEIMH4ixB pIaqeD2UuMIif0Fv529loHGrKeNpbpRHD6ZFiZkAvnUwJkbOdhUqgWR0sRhPCMaM 5PEA7TdDpQ8k5O/Cyo18mycnBxnB4faO0xjqq8UcT3myGN1ctfICgiWBWcPzb7Oj V34B7lsCp7BNMJVp+Y8t6QKVhS1z8a6x -----END CERTIFICATE-----Generated at Sun May 19 02:39:37 2024 by rpki-client on console-fra.rpki-client.org